SUSE-SU-2017:0302-1: bash&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:0302-1 is a vulnerability in bash&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 27-01-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for bash This update for bash fixes the following issues: - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables. (bsc#1001299) - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command execution when $HOSTNAME was expanded in the prompt. (bsc#1000396) The following bugs were fixed: - bsc#971410: Scripts could terminate unexpectedly due to mishandled recursive traps. - bsc#959755: Clarify that the files /etc/profile as well as /etc/bash.bashrc may source other files as well even if the bash does not.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- bash&distro=SUSE Linux Enterprise Server 11 SP4< 3.2-147.29.1
- bash&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.2-147.29.1
- bash&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 3.2-147.29.1
1 vendor · 3 products
References
7 links- bugzilla.suse.com/959755REPORT
- bugzilla.suse.com/971410REPORT